Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Is this the flashback malware?

Please look at these logs and tell me if these names and addresses look legit. Ever since january 12th I have had lots of problems with my computer. running slow, freezing up, my user permmisions changed, and sleep schedule changed, things like that. So I wiped my hard drive clean and reinstalled Lion using Lion's internet reinstall through the recovery partition and this is the very first few minutes of logs. Also I noticed after the HD wipe that partition still had 3 folders and 2 files and about 250mb of the drive unaccounted for not including the few gigs gone from formatting. pay close attention to the 3rd log a darwin kernel from January 12th and then half way through another log connecting to abidjan africa and then torward the end some wierd connections and like remote keyboard connections. By the way after the reinstall I still have the same problems and they're worse then before. Please help




4/12/12 7:56:39.000 PMbootlogBOOT_TIME 1334282199 0
4/12/12 7:56:40.000 PMkernelPMAP: PCID enabled
4/12/12 7:56:40.000 PMkernelDarwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64
4/12/12 7:56:40.000 PMkernelvm_page_bootstrap: 989369 free pages and 51015 wired pages
4/12/12 7:56:40.000 PMkernelkext submap [0xffffff7f8072f000 - 0xffffff8000000000], kernel text [0xffffff8000200000 - 0xffffff800072f000]
4/12/12 7:56:40.000 PMkernelzone leak detection enabled
4/12/12 7:56:40.000 PMkernelstandard timeslicing quantum is 10000 us
4/12/12 7:56:40.000 PMkernelmig_table_max_displ = 73
4/12/12 7:56:40.000 PMkernelTSC Deadline Timer supported and enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=1 LocalApicId=0 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=2 LocalApicId=2 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=3 LocalApicId=1 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=4 LocalApicId=3 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=5 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=6 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=7 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=8 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelcalling mpo_policy_init for TMSafetyNet
4/12/12 7:56:40.000 PMkernelSecurity policy loaded: Safety net for Time Machine (TMSafetyNet)
4/12/12 7:56:40.000 PMkernelcalling mpo_policy_init for Sandbox
4/12/12 7:56:40.000 PMkernelSecurity policy loaded: Seatbelt sandbox policy (Sandbox)
4/12/12 7:56:40.000 PMkernelcalling mpo_policy_init for Quarantine
4/12/12 7:56:40.000 PMkernelSecurity policy loaded: Quarantine policy (Quarantine)
4/12/12 7:56:40.000 PMkernelCopyright (c) 1982, 1986, 1989, 1991, 1993
4/12/12 7:56:40.000 PMkernelThe Regents of the University of California. All rights reserved.
4/12/12 7:56:40.000 PMkernelMAC Framework successfully initialized
4/12/12 7:56:40.000 PMkernelusing 16384 buffer headers and 10240 cluster IO buffer headers
4/12/12 7:56:40.000 PMkernelIOAPIC: Version 0x20 Vectors 64:87
4/12/12 7:56:40.000 PMkernelACPI: System State [S0 S3 S4 S5] (S3)
4/12/12 7:56:40.000 PMkernelPFM64 (36 cpu) 0xf10000000, 0xf0000000
4/12/12 7:56:40.000 PMkernel[ PCI configuration begin ]
4/12/12 7:56:40.000 PMkernelAppleIntelCPUPowerManagement: Turbo Ratios 008B
4/12/12 7:56:40.000 PMkernelAppleIntelCPUPowerManagement: (built 18:56:37 Jan 12 2012) initialization complete
4/12/12 7:56:40.000 PMkernelconsole relocated to 0xf10000000
4/12/12 7:56:40.000 PMkernelPCI configuration changed (bridge=11 device=2 cardbus=0)
4/12/12 7:56:40.000 PMkernel[ PCI configuration end, bridges 8 devices 13 ]
4/12/12 7:56:40.000 PMkernelmbinit: done [64 MB total pool size, (42/21) split]
4/12/12 7:56:40.000 PMkernelPthread support ABORTS when sync kernel primitives misused
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeZlib kmod start
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeDataless kmod start
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeZlib load succeeded
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeDataless load succeeded
4/12/12 7:56:40.000 PMkernelAppleIntelCPUPowerManagementClient: ready
4/12/12 7:56:40.000 PMkernelAppleUSBMultitouchDriver::checkStatus - received Status Packet, Payload 2: device was reinitialized
4/12/12 7:56:40.000 PMkernel[IOBluetoothHCIController::setConfigState] calling registerService
4/12/12 7:56:40.000 PMkernelrooting via boot-uuid from /chosen: D117A117-7012-3D6B-8C37-E0FE9BE60C49
4/12/12 7:56:40.000 PMkernelWaiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
4/12/12 7:56:40.000 PMkernelGot boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/SATA@1F,2/AppleIntelPchS eriesAHCI/PRT0@0/IOAHCIDevice@0/AppleAHCIDiskDriver/IOAHCIBlockStorageDevice/IOB lockStorageDriver/APPLE SSD TS128C Media/IOGUIDPartitionScheme/Macintosh HD@2
4/12/12 7:56:40.000 PMkernelBSD root: disk0s2, major 14, minor 2
4/12/12 7:56:40.000 PMkernelKernel is LP64
4/12/12 7:56:40.093 PMcom.apple.launchd*** launchd[1] has started up. ***
4/12/12 7:56:40.506 PMcom.apple.launchd(com.apple.sandboxd) Unknown value for key POSIXSpawnType: Interactive
4/12/12 7:56:40.773 PMfseventsdcould not open <</.fseventsd/fseventsd-uuid>> (No such file or directory)
4/12/12 7:56:40.773 PMfseventsdlog dir: /.fseventsd getting new uuid: BCF35C31-259F-46C6-85DF-204072F1471F
4/12/12 7:56:41.044 PMUserEventAgentstarting CaptiveNetworkSupport as SystemEventAgent built May 25 2011 12:27:35
4/12/12 7:56:41.050 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCCopyWiFiDevices:388 WiFi Device Name == NULL
4/12/12 7:56:42.246 PMcom.apple.SecurityServerSession 100000 created
4/12/12 7:56:42.342 PMcom.apple.SecurityServerEntering service
4/12/12 7:56:42.382 PMconfigdupdateConfiguration(): no preferences.
4/12/12 7:56:42.386 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCCopyWiFiDevices:388 WiFi Device Name == NULL
4/12/12 7:56:42.756 PMUserEventAgentServermgrdRegistration cannot load config data
4/12/12 7:56:42.764 PMUserEventAgentget_backup_share_points no AFP
4/12/12 7:56:44.000 PMkernelBTCOEXIST off
4/12/12 7:56:44.000 PMkernelwl0: Broadcom BCM4353 802.11 Wireless Controller
4/12/12 7:56:44.000 PMkernel5.100.98.75
4/12/12 7:56:45.000 PMkernelPrevious Shutdown Cause: 3
4/12/12 7:56:45.562 PMcom.apple.pfctlNo ALTQ support in kernel
4/12/12 7:56:45.562 PMcom.apple.pfctlALTQ related functions disabled
4/12/12 7:56:45.584 PMcom.apple.ucupdate.plistucupdate: Checked 1 update, no match found.
4/12/12 7:56:45.648 PMcom.apple.launchd(com.apple.bsd.dirhelper) Throttling respawn: Will start in 10 seconds
4/12/12 7:56:45.881 PMsystemkeychaindone file: /var/run/systemkeychaincheck.done
4/12/12 7:56:46.000 PMkernelmacx_swapon SUCCESS
4/12/12 7:56:46.000 PMkernelWaiting for DSMOS...
4/12/12 7:56:46.356 PMUpdateSettingsToolCGSLookupServerRootPort: Failed to look up the port for "com.apple.windowserver.active" (1102)
4/12/12 7:56:47.000 PMkernelDSMOS has arrived
4/12/12 7:56:47.019 PMloginwindowLogin Window Application Started
4/12/12 7:56:47.180 PMmds(Normal) FMW: FMW 0 0
4/12/12 7:56:47.305 PMcom.apple.launchd(com.apple.bsd.dirhelper) Throttling respawn: Will start in 9 seconds
4/12/12 7:56:47.537 PMairportd_processDLILEvent: en0 attached (down)
4/12/12 7:56:47.539 PMUserEventAgentCaptiveNetworkSupport:CreateInterfaceWatchList:2788 WiFi Devices Found. 🙂
4/12/12 7:56:47.539 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.540 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.540 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.540 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.541 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.542 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.548 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.549 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.582 PMconfigdNew network configuration saved
4/12/12 7:56:47.594 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.000 PMkernelAirPort_Brcm4331: Ethernet address b8:8d:12:05:cd:30
4/12/12 7:56:47.000 PMkernelIO80211Controller::dataLinkLayerAttachComplete(): adding AppleEFINVRAM notification
4/12/12 7:56:47.000 PMkernelIO80211Interface::efiNVRAMPublished():
4/12/12 7:56:47.000 PMkernelCreated virtif 0xffffff800b0c2400 p2p0
4/12/12 7:56:47.000 PMkernelAirPort: Link Down on en0. Reason 1 (Unspecified).
4/12/12 7:56:47.605 PMconfigdnetwork configuration changed.
4/12/12 7:56:50.019 PMloginwindow**DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
4/12/12 7:56:50.191 PMcom.apple.launchctl.LoginWindowcom.apple.findmymacmessenger: Already loaded
4/12/12 7:56:50.270 PMloginwindowUSER_PROCESS: 52 console
4/12/12 7:56:53.000 PMkernelIOUserEthernetController: Ethernet address b8:8d:12:05:cd:31
4/12/12 7:56:54.767 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:54.767 PMconfigdnetwork configuration changed.
4/12/12 7:56:56.360 PMmDNSRespondermDNSResponder mDNSResponder-320.14.0 (Nov 16 2011 01:16:56) starting OSXVers 11
4/12/12 7:56:56.440 PMcom.apple.usbmuxdusbmuxd-263 on Aug 23 2011 at 00:44:06, running 64 bit
4/12/12 7:56:56.708 PMnetbiosdUnable to start NetBIOS name service:
4/12/12 7:56:56.878 PMcom.apple.SecurityServerSession 100004 created
4/12/12 7:56:56.883 PMSetup AssistantTask1
4/12/12 7:56:56.894 PMSetup AssistantTask2
4/12/12 7:56:56.909 PM[0x0-0x4004].com.apple.SetupAssistant...System identity already exists for domain com.apple.systemdefault. Done.
4/12/12 7:56:56.909 PMSetup Assistantcerttool systemdefault 0
4/12/12 7:56:56.937 PMSetup AssistantAdmin Auth : All clear, SetUpServerConnection now.
4/12/12 7:56:56.960 PMSetup AssistantStarting to discover USB Dongles.
4/12/12 7:56:57.023 PMSetup Assistantupdated network configuration
4/12/12 7:56:57.032 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:57.032 PMconfigdnetwork configuration changed.
4/12/12 7:56:57.041 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:56:57.057 PMSetup AssistantStartListeningForDefaultOutputDeviceChanging
4/12/12 7:56:57.057 PMSetup AssistantStartListeningForHeadphonesGettingPluggedIn
4/12/12 7:56:57.059 PMSetup AssistantsetVolume (34)
4/12/12 7:56:57.059 PMSetup AssistantHeadphones connected (0)
4/12/12 7:56:57.060 PMSetup AssistantmodelUID AppleHDA:98
4/12/12 7:56:57.062 PMSetup AssistantlayoutID 98
4/12/12 7:56:57.062 PMSetup AssistantsetSpeakerVolume
4/12/12 7:56:57.062 PMSetup AssistantTransportType 0 kIOAudioDeviceTransportTypeBuiltIn
4/12/12 7:56:57.062 PMSetup AssistantAudioObjectGetPropertyDataSize kAudioDevicePropertyVolumeDecibels for channel (0) : kAudioHardwareUnknownPropertyError
4/12/12 7:56:57.063 PMSetup AssistantSet volume for channel (1) -5.000000
4/12/12 7:56:57.064 PMSetup AssistantSet volume for channel (2) -5.000000
4/12/12 7:56:57.074 PMSetup AssistantNumberOfKeyboardHIDDevices 1
4/12/12 7:56:57.074 PMSetup AssistantNumberOfPointingHIDDevices 1
4/12/12 7:56:57.088 PMSetup Assistant----------

-> searchForValidSystems has arrived.

4/12/12 7:56:57.184 PMSetup Assistant. Found disk (diskIdentifier=disk0, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.190 PMSetup Assistant. Found disk (diskIdentifier=disk0, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.195 PMSetup Assistant. Found disk (diskIdentifier=disk0s1, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.203 PMSetup Assistant. Found disk (diskIdentifier=disk0s1, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.205 PMWindowServerkCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
4/12/12 7:56:57.209 PMSetup Assistant. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.220 PMSetup Assistant. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.232 PMSetup Assistant. Found disk (diskIdentifier=disk0s3, mountpoint=(null), isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.240 PMSetup Assistant. Found disk (diskIdentifier=disk0s3, mountpoint=(null), isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.250 PMSetup Assistant. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.852 PMgenatsdb*GENATSDB* FontObjects generated = 324
4/12/12 7:57:01.832 PMconfigdnetwork configuration changed.
4/12/12 7:57:01.834 PMconfigdnetwork configuration changed.
4/12/12 7:57:01.840 PMmDNSResponderD2D_IPC: Loaded
4/12/12 7:57:01.840 PMmDNSResponderD2DInitialize succeeded
4/12/12 7:57:01.858 PMSetup Assistant(Snoop) Listening on 14 / 221473790
4/12/12 7:57:13.845 PMSetup AssistantStopped VOT 0
4/12/12 7:57:13.880 PMSetup AssistantIntlSetValue(0, "AppleDateResID", 0) returned 0
4/12/12 7:57:13.882 PMSetup AssistantIntlSetValue(0, "AppleTimeResID", 0) returned 0
4/12/12 7:57:13.884 PMSetup AssistantIntlSetValue(0, "AppleNumberResID", 0) returned 0
4/12/12 7:57:13.886 PMSetup AssistantSMSizeFormatter : using `en_US'
4/12/12 7:57:13.886 PMSetup AssistantSMSizeFormatter : using `en_US'
4/12/12 7:57:13.886 PMSetup AssistantSMSizeFormatter : using `en_US'
4/12/12 7:57:13.906 PMSetup AssistantCurrent Iso LC = en, en
4/12/12 7:57:14.060 PMSetup AssistantTime to move from MBIntroCountry (Intro_Country) to MBRegisterKeyboard (Reg_Keyboard) was 0.215037s
4/12/12 7:57:17.486 PMSetup AssistantsetAsciiLayout currentInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.486 PMSetup AssistantcurrentSourceIsKBLayout
4/12/12 7:57:17.486 PMSetup AssistantisAsciiCapable
4/12/12 7:57:17.486 PMSetup AssistantdefaultAsciiKBLayout <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.486 PMSetup AssistantcurrentAsciiInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.487 PMSetup AssistantTISSetDefaultAsciiCapableKeyboardLayoutInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.489 PMSetup AssistantTISEnableInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.489 PMSetup AssistantTSMSetCurrentAsciiCapableInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.515 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:57:20.280 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:57:20.427 PMSetup AssistantTime to move from MBRegisterKeyboard (Reg_Keyboard) to MBWirelessPickNetwork (Wireless_Pick_Network) was 2.974510s
4/12/12 7:57:21.000 PMkernelen0: 802.11d country code set to 'US'.
4/12/12 7:57:21.000 PMkernelen0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 149 153 157 161 165
4/12/12 7:57:39.137 PMrpcsvchostsandbox_init: com.apple.msrpc.netlogon.sb succeeded
4/12/12 7:58:15.924 PMwarmd[warmctl_evt_timer_bc_activation_timeout:260] BC activation bcstop timer fired!
4/12/12 7:58:45.808 PMcom.apple.launchd(com.apple.xprotectupdater[35]) Exited with code: 255
4/12/12 7:59:50.279 PMhelpdCarbonCore.framework, Our status with coreservicesd is unusual, 2, and things likely will stop working.
4/12/12 7:59:50.279 PMhelpdCarbonCore.framework: Unable to connect to coreservicesd. Things likely won't work. Sorry.
4/12/12 8:02:53.288 PMSetup AssistantconfigureWithSettings: {

Connection = Wireless;

WirelessNetwork = LasVegas71;

}

4/12/12 8:02:53.297 PMSetup Assistantno TCPConfigureMethod specified, assuming DHCP
4/12/12 8:02:53.000 PMkernelMacAuthEvent en0 Auth result for: e0:91:f5:09:84:8e MAC AUTH succeeded
4/12/12 8:02:53.000 PMkernelwlEvent: en0 en0 Link UP
4/12/12 8:02:53.000 PMkernelAirPort: Link Up on en0
4/12/12 8:02:53.000 PMkernelen0: BSSID changed to e0:91:f5:09:84:8e
4/12/12 8:02:53.915 PMairportd_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:02:54.000 PMkernelAirPort: RSN handshake complete on en0
4/12/12 8:02:56.326 PMconfigdnetwork configuration changed.
4/12/12 8:02:56.345 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - Probe
4/12/12 8:02:56.345 PMUserEventAgentCaptiveNetworkSupport:CNSPreferences:60 Creating new preferences
4/12/12 8:02:56.346 PMUserEventAgentCaptiveNetworkSupport:CaptiveStartDetect:2343 Bypassing probe on LasVegas71 because it is protected and not on the exception list
4/12/12 8:02:56.349 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - Unknown
4/12/12 8:02:56.350 PMconfigdnetwork configuration changed.
4/12/12 8:02:57.932 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 8:02:58.114 PMSetup AssistantTime to move from MBWirelessPickNetwork (Wireless_Pick_Network) to MBMigrateYN (migrationui) was 0.169636s
4/12/12 8:06:41.445 PMSetup AssistantTime to move from MBMigrateYN (migrationui) to MBRegisterAppleID (Reg_Apple_ID) was 0.096014s
4/12/12 8:07:03.791 PMcom.apple.kextcacheCreated prelinked kernel /System/Library/Caches/com.apple.kext.caches/Startup/kernelcache.
4/12/12 8:08:57.537 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:08:57.535 findNames[180:707] Database file is missing: /var/root/Library/Application Support/AddressBook/AddressBook-v22.abcddb
4/12/12 8:09:02.694 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:09:02.692 AddressBookSync[181:1f03] Error, could not create MachMessagePort for com.apple.AddressBook.abd
4/12/12 8:09:22.332 PMSetup AssistantReceived 761 bytes of data
4/12/12 8:09:22.332 PMSetup AssistantNo Error in responseDictionary
4/12/12 8:09:22.576 PMSetup AssistantTime to move from MBRegisterAppleID (Reg_Apple_ID) to MBRegisterUserInfo (Reg_United_States) was 0.101399s
4/12/12 8:09:27.973 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:09:27.971 AddressBookSync[181:707] [0x10831b320] |ISyncManager|Warning| SyncServer is unavailable: timed out trying to connect
4/12/12 8:09:27.974 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:09:27.973 AddressBookSync[181:707] AddressBookSync (client id: com.apple.AddressBook) error: Exception running AddressBookSync: Timed out waiting for the sync server
4/12/12 8:09:37.652 PM[0x0-0x4004].com.apple.SetupAssistant...System identity already exists for domain com.apple.systemdefault. Done.
4/12/12 8:09:37.652 PMSetup Assistantcerttool systemdefault 0
4/12/12 8:09:37.652 PMSetup AssistantThere is an existing Kerberos realm, [NOT] running configureLocalKDC.
4/12/12 8:09:37.654 PMSetup Assistantsearch paths: (

"/Local/Default"

)

4/12/12 8:09:37.753 PMSetup AssistantTime to move from MBRegisterUserInfo (Reg_United_States) to MBRegisterLocalAccount (Reg_Local_Account) was 0.147491s
4/12/12 8:10:22.498 PMSetup AssistantuniqueInParent:1 uniqueLocal:1
4/12/12 8:10:22.504 PMSetup AssistantuniqueInParent:1 uniqueLocal:1
4/12/12 8:10:24.677 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.681 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.684 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.688 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.692 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.695 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.699 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.702 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.707 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.711 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.715 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.720 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.724 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.779 PMSetup Assistantcreating loginKeychain for: David
4/12/12 8:10:24.818 PMSetup AssistantKeychain ON.
4/12/12 8:10:24.835 PMSetup AssistantAppleID Identity Linked: dbingham7@yahoo.com
4/12/12 8:10:24.835 PMSetup Assistant_CSAddAppleIDAccount Failed with error: -11
4/12/12 8:10:24.972 PMSetup AssistantAppleIDReset Enabled: dbingham7@yahoo.com
4/12/12 8:10:24.982 PMSetup Assistant/usr/sbin/locsetup does not exist [-country US -language en]
4/12/12 8:10:25.036 PMSetup AssistantNo username or no password
4/12/12 8:10:25.040 PMSetup Assistantcreating loginKeychain for: David
4/12/12 8:10:25.046 PMconfigdsetting hostname to "Davids-MacBook-Air.local"
4/12/12 8:10:25.078 PMSetup Assistant.Mac cert config scheduled
4/12/12 8:10:25.141 PMmDNSResponderUser updated Computer Name from “MacBookAir-B88D1205CD30” to “David’s MacBook Air”
4/12/12 8:10:25.141 PMmDNSResponderUser updated Local Hostname from “MacBookAir-B88D1205CD30” to “Davids-MacBook-Air”
4/12/12 8:10:26.078 PMSetup Assistant*********** _hadleNotification MBActivityBeganNotification
4/12/12 8:10:26.078 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.170 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.220 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.583 PMSetup AssistantReceived 234 bytes of data
4/12/12 8:10:26.584 PMSetup AssistantMBAppleRegTransaction: No Error in responseDictionary.
4/12/12 8:10:26.584 PMSetup AssistantGMTTime Fri, 13 Apr 2012 02:10:26 GMT
4/12/12 8:10:26.946 PM[0x0-0x4004].com.apple.SetupAssistantOffset: 0
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistantnames with offset: (
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Abidjan",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Accra",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Bamako",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Banjul",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Bissau",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Casablanca",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Conakry",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Dakar",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/El_Aaiun",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Freetown",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Lome",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Monrovia",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Nouakchott",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Ouagadougou",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Sao_Tome",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "America/Danmarkshavn",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "America/Scoresbysund",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Atlantic/Azores",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Atlantic/Reykjavik",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Atlantic/St_Helena",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant GMT
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant)
4/12/12 8:10:27.028 PM[0x0-0x4004].com.apple.SetupAssistantCity found: "Abidjan - Côte d’Ivoire"
4/12/12 8:10:27.028 PM[0x0-0x4004].com.apple.SetupAssistantSelection in progress...
4/12/12 8:10:27.064 PM[0x0-0x4004].com.apple.SetupAssistantDONE - result: 0 (SUCCESS)
4/12/12 8:10:27.078 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:27.157 PMSetup Assistantzset (

"--osx",

"--verbose",

"--offset",

0

) : terminated with 0

4/12/12 8:10:27.163 PMSetup Assistant_setNTPServer Africa/Abidjan (GMT) offset 0 0
4/12/12 8:10:27.164 PMSetup AssistantGMTOffset -600 (-21600.000000 seconds)
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantCity: Orem
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantCountry: US
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantRegion: UT
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantReset to default: YES
4/12/12 8:10:27.538 PMntpdproto: precision = 1.000 usec
4/12/12 8:10:27.647 PM[0x0-0x4004].com.apple.SetupAssistantCity found: "Orem, UT - United States"
4/12/12 8:10:27.647 PM[0x0-0x4004].com.apple.SetupAssistantSelection in progress...
4/12/12 8:10:27.737 PM[0x0-0x4004].com.apple.SetupAssistantDONE - result: 0 (SUCCESS)
4/12/12 8:10:27.754 PMdiskmanagementdDM ->T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: inHostDiskUDS=0x10cd0ec20=disk0s2=Macintosh HD inWhatStr=RecoveryInfoBaseSystemVersion
4/12/12 8:10:27.800 PMSetup Assistantzset (

"--osx",

"--verbose",

"--country",

US,

"--region",

UT,

"--city",

Orem,

"--adaptive"

) : terminated with 0

4/12/12 8:10:27.801 PMSetup Assistant_setNTPServer America/Denver (MDT) offset -21600 (Daylight) 0
4/12/12 8:10:27.982 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did get booterRecoveryUDS=0x10cd0eae0=disk0s3=Recovery HD
4/12/12 8:10:28.016 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did mount nobrowse; MP=/Volumes/Recovery HD OMS=0x10c91b5c0
4/12/12 8:10:28.016 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: getting dict from file=/Volumes/Recovery HD/com.apple.recovery.boot/SystemVersion.plist
4/12/12 8:10:28.017 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: got dict (or NULL=will return err): oooInfoDict=0x7fba92a00c70
4/12/12 8:10:28.019 PMSetup Assistant. Found disk (diskIdentifier=disk0s3, mountpoint=/Volumes/Recovery HD, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 8:10:28.065 PMfseventsdLogging disabled completely for device:1: /Volumes/Recovery HD
4/12/12 8:10:28.110 PMSetup Assistant*********** _hadleNotification MBActivityDidSucceedNotification
4/12/12 8:10:28.115 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:28.118 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did if-needed-best-effort unmount
4/12/12 8:10:28.118 PMdiskmanagementdDM <-T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: retErr=0 outInfoDict={

ProductBuildVersion = 11D50;

ProductCopyright = "1983-2012 Apple Inc.";

ProductName = "Mac OS X";

ProductUserVisibleVersion = "10.7.3";

ProductVersion = "10.7.3";

}

4/12/12 8:10:28.499 PMSetup AssistantReceived 309 bytes of data
4/12/12 8:10:28.499 PMSetup AssistantfirstPage is not html
4/12/12 8:10:34.529 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:34.579 PMSetup Assistant*********** _hadleNotification MBActivityDidFailNotification
4/12/12 8:10:35.065 PMSetup AssistantTime to move from MBChooseHasCameraOrNot (Reg__HasCameraOrNot) to MBRegisterAccountPicture (Reg_Account_Picture) was 0.484633s
4/12/12 8:10:35.065 PMSetup Assistant*********** _hadleNotification MBActivityEndedNotification
4/12/12 8:10:53.000 PMkernelMacAuthEvent en0 Auth result for: e0:91:f5:09:84:8e MAC AUTH succeeded
4/12/12 8:10:53.000 PMkernelwlEvent: en0 en0 Link UP
4/12/12 8:10:53.000 PMkernelAirPort: RSN handshake complete on en0
4/12/12 8:10:54.000 PMkernelen0: BSSID changed to e0:91:f5:09:84:8e
4/12/12 8:11:19.779 PMSetup AssistantTime to move from MBRegisterAccountPicture (Reg_Account_Picture) to MBFinishGestureTrap (Configured_And_Sent) was 0.598393s
4/12/12 8:11:23.814 PM[0x0-0x4004].com.apple.SetupAssistantFound USB Ethernet Device named = IOEthernetInterface
4/12/12 8:11:23.814 PM[0x0-0x4004].com.apple.SetupAssistantFound USB Ethernet Device named = AirPort_Brcm4331_Interface
4/12/12 8:11:23.814 PM[0x0-0x4004].com.apple.SetupAssistantFound USB Ethernet Device named = AirPort_Brcm4331_Interface
4/12/12 8:11:23.922 PMloginwindowDEAD_PROCESS: 52 console
4/12/12 8:11:24.976 PMloginwindowLogin Window Application Started
4/12/12 8:11:24.985 PMloginwindow**DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
4/12/12 8:11:25.058 PMcom.apple.launchctl.LoginWindowcom.apple.findmymacmessenger: Already loaded
4/12/12 8:11:25.093 PMcom.apple.SecurityServerSession 100009 created
4/12/12 8:11:25.095 PMloginwindowLogin Window Started Security Agent
4/12/12 8:11:25.133 PMairportd_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:11:25.196 PMSecurityAgentEcho enabled
4/12/12 8:11:25.196 PMSecurityAgentEcho enabled
4/12/12 8:11:25.918 PMcom.apple.loginwindowCan't find file://localhost/Users/David/Library/Preferences/com.apple.finder.plist
4/12/12 8:11:25.918 PMcom.apple.loginwindowPre-generating cache file for user 501
4/12/12 8:11:25.918 PMcom.apple.loginwindowHome: /Users/David
4/12/12 8:11:25.918 PMcom.apple.loginwindowCache folder: /var/folders/y1/xy4qjyrj7k1d8982jk1nhyd80000gn/C/com.apple.QuickLook.thumbnailc ache
4/12/12 8:11:25.918 PMcom.apple.loginwindowNo thumbnails found
4/12/12 8:11:30.604 PMSecurityAgentUser info context values set for David
4/12/12 8:11:30.604 PMSecurityAgentUser info context values set for David
4/12/12 8:11:30.728 PMSecurityAgentLogin Window login proceeding
4/12/12 8:11:30.728 PMSecurityAgentLogin Window login proceeding
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | name = David, path = /Users/David, homeLoc = (null)
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter setNeedsToUnmountDirVolumeAtLogout:] | mounter calling mechanism to setNeedsToUnmountDirVolumeAtLogout to 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | urlAttribute = null
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | homeDirPath did NOT follow a symlink, keeping original path of: /Users/David
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | homeDirMajorType = 1
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountStandardDirectoryForUser:atPath:attributes:] | name = David, path = /Users/David, homeLoc = (null)
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism isGuestAccount] | enter
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism isGuestAccount] | Guest account check returning 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter setHomeDirType:] | setHomeDirType to 1
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountStandardDirectoryForUser:atPath:attributes:] | returning 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | returning 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism invoke] | mountHomeDirectoryForUser returns 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism updateAndUnlockKeychain] | updateAndUnlockKeychain
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism launchHomeDirFixerToolIfNeeded:] | launchHomeDirFixerToolIfNeeded called with 0
4/12/12 8:11:30.983 PMloginwindowLogin Window - Returned from Security Agent
4/12/12 8:11:30.990 PMloginwindowUSER_PROCESS: 242 console
4/12/12 8:11:31.027 PMairportd_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:11:31.050 PMcom.apple.launchd.peruser.501(com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
4/12/12 8:11:31.053 PMcom.apple.launchctl.Aquaload: option requires an argument -- D
4/12/12 8:11:31.053 PMcom.apple.launchctl.Aquausage: launchctl load [-wF] [-D <user|local|network|system|all>] paths...
4/12/12 8:11:31.161 PMcom.apple.launchd.peruser.501(com.apple.launchctl.Aqua[266]) Exited with code: 1
4/12/12 8:11:31.390 PMMiniLauncherLaunching iCloud prefs for user 501
4/12/12 8:11:31.517 PMMiniLauncherLaunch IncompatibleAppDisplay.app (1)
4/12/12 8:11:31.533 PMUserEventAgentCaptiveNetworkSupport:CNSServerRegisterUserAgent:187 new user agent port: 25875
4/12/12 8:11:32.818 PMSystem PreferencesDatabase file is missing: /Users/David/Library/Application Support/AddressBook/AddressBook-v22.abcddb
4/12/12 8:11:32.897 PMDockBookmark failed to issue extension for item /Developer/Applications (depth=1): No such file or directory
4/12/12 8:11:32.928 PMcom.apple.launchd.peruser.501(com.apple.CSConfigDotMacCert-dbingham7@me.com-SharedServices[308]) Exited with code: 1
4/12/12 8:11:32.969 PMcoreservicesd*** process 28 exceeded 500 log message per second limit - remaining messages this second discarded ***
4/12/12 8:11:33.464 PMSystem PreferencesCould not find Meta Data for persistent Store
4/12/12 8:11:33.788 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extra2012-04-12 20:11:33.577 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extra2012-04-12 20:11:33.789 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.792 PMcom.apple.dock.extra2012-04-12 20:11:33.791 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.792 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.793 PMcom.apple.dock.extra2012-04-12 20:11:33.792 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.829 PMSystem PreferencesThe IAAccountDiscovery completed notification
4/12/12 8:11:33.977 PMSystem PreferenceskCGErrorIllegalArgument: CGSDeviceCreate: Invalid window
4/12/12 8:11:33.977 PMSystem PreferenceskCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
4/12/12 8:11:33.977 PMSystem PreferencesFailed to create window context device
4/12/12 8:11:33.978 PMSystem PreferencesCGWindowContextCreate: failed to create window context delegate.
4/12/12 8:11:33.978 PMSystem Preferences_initWithWindowNumber: error creating graphics ctxt object for ctxt:0x9a03, window:0x0
4/12/12 8:11:33.978 PMSystem PreferencesCGPixelAccessLock failed!
4/12/12 8:11:33.979 PM[0x0-0x11011].com.apple.systempreferencesApr 12 20:11:33 Davids-MacBook-Air.local System Preferences[285] <Error>: Failed to create window context device
4/12/12 8:11:33.979 PM[0x0-0x11011].com.apple.systempreferencesApr 12 20:11:33 Davids-MacBook-Air.local System Preferences[285] <Error>: CGWindowContextCreate: failed to create window context delegate.
4/12/12 8:11:35.060 PMgenatsdb*GENATSDB* FontObjects generated = 324
4/12/12 8:11:49.294 PMauthorizationhostSFBuiltinEntitled: System Preferences.app is not entitled for system.preferences.security.remotepair
4/12/12 8:11:49.567 PMcoreservicesd*** process 28 exceeded 500 log message per second limit - remaining messages this second discarded ***
4/12/12 8:11:50.750 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x10f627000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:12:31.366 PMcom.apple.SecurityServerSession 100007 created
4/12/12 8:12:42.011 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x11084f000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:13:35.534 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:14:32.734 PMhelpdCarbonCore.framework, Our status with coreservicesd is unusual, 2, and things likely will stop working.
4/12/12 8:14:32.734 PMhelpdCarbonCore.framework: Unable to connect to coreservicesd. Things likely won't work. Sorry.
4/12/12 8:14:40.049 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:15:24.095 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:15:36.170 PMFirewallStealth Mode connection attempt to UDP 192.168.1.47:61447 from 192.168.1.1:53
4/12/12 8:16:09.963 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:16:51.859 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x117812000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:16:55.839 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:17:14.307 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x1109c9000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:17:44.585 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:18:48.322 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x110fcf000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:18:58.899 PMrpcsvchostsandbox_init: com.apple.msrpc.netlogon.sb succeeded
4/12/12 8:18:58.940 PMFirewallDeny netbiosd data in from 192.168.1.47:137 to port 137 proto=17
4/12/12 8:18:58.987 PMFirewallDeny netbio

Posted on Apr 13, 2012 10:17 AM

Reply
Question marked as Best reply

Posted on Apr 13, 2012 10:20 AM

This thread took me an hour to get started. Updated info I now know it is malware I know where its located I just dont know how to delete it.

32 replies

Apr 13, 2012 12:21 PM in response to dbingham7

dbingham7 wrote:


Someone give me an example of a folder name or an action thats been logged that shows proof I have malware. Please I have been over every folder and file on the computer and every log so I will know if one is there

No, you give us the name of the folders and files that you think are part of some 'infestation'

Apr 13, 2012 12:46 PM in response to thomas_r.

file://localhost/Library/PDF%20Services/Add%20PDF%20to%20iTunes/

file://localhost/Library/PDF%20Services/Mail%20PDF.workflow/

file://localhost/Library/PDF%20Services/Save%20PDF%20to%20Web%20Receipts%20Folde r.pdfworkflow/



4/13/12 1:39:40.264 PM TextEdit: -[__NSCFDictionary panelOrderingDidCompleteHandler]: unrecognized selector sent to instance 0x7f8d5866dd50

4/13/12 1:39:40.264 PM TextEdit: An uncaught exception was raised

4/13/12 1:39:40.264 PM TextEdit: -[__NSCFDictionary panelOrderingDidCompleteHandler]: unrecognized selector sent to instance 0x7f8d5866dd50

4/13/12 1:39:40.283 PM TextEdit: (

0 CoreFoundation 0x00007fff9067cfc6 __exceptionPreprocess + 198

1 libobjc.A.dylib 0x00007fff8d701d5e objc_exception_throw + 43

2 CoreFoundation 0x00007fff907092ae -[NSObject doesNotRecognizeSelector:] + 190

3 CoreFoundation 0x00007fff90669e73 ___forwarding___ + 371

4 CoreFoundation 0x00007fff90669c88 _CF_forwarding_prep_0 + 232

5 RemoteViewServices 0x00007fff84bf713c __54-[NSRemoteSavePanel _runOrderingOperationWithContext:]_block_invoke_0316 + 201

6 Foundation 0x00007fff86ea0fca -[__NSObserver _doit:] + 296

7 Foundation 0x00007fff86ea0e9d __-[NSNotificationCenter addObserverForName:object:queue:usingBlock:]_block_invoke_1 + 50

8 CoreFoundation 0x00007fff90625aaa _CFXNotificationPost + 2634

9 Foundation 0x00007fff86e5cfe7 -[NSNotificationCenter postNotificationName:object:userInfo:] + 65

10 AppKit 0x00007fff864085ac __-[NSWindow _windowTransformAnimationDidEnd:]_block_invoke_1 + 62

11 libdispatch.dylib 0x00007fff874008ba _dispatch_call_block_and_release + 18

12 libdispatch.dylib 0x00007fff8740272a _dispatch_main_queue_callback_4CF + 308

13 CoreFoundation 0x00007fff9061206c __CFRunLoopRun + 1724

14 CoreFoundation 0x00007fff90611676 CFRunLoopRunSpecific + 230

15 HIToolbox 0x00007fff8cd1031f RunCurrentEventLoopInMode + 277

16 HIToolbox 0x00007fff8cd1751b ReceiveNextEventCommon + 181

17 HIToolbox 0x00007fff8cd17456 BlockUntilNextEventMatchingListInMode + 62

18 AppKit 0x00007fff85d6af5d _DPSNextEvent + 659

19 AppKit 0x00007fff85d6a861 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 135

20 AppKit 0x00007fff85d6719d -[NSApplication run] + 470

21 AppKit 0x00007fff85fe5b88 NSApplicationMain + 867

22 TextEdit 0x000000010a8b3678 TextEdit + 5752

)

4/13/12 1:39:40.284 PM TextEdit: *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[__NSCFDictionary panelOrderingDidCompleteHandler]: unrecognized selector sent to instance 0x7f8d5866dd50'

*** First throw call stack:

(

0 CoreFoundation 0x00007fff9067cfc6 __exceptionPreprocess + 198

1 libobjc.A.dylib 0x00007fff8d701d5e objc_exception_throw + 43

2 CoreFoundation 0x00007fff907092ae -[NSObject doesNotRecognizeSelector:] + 190

3 CoreFoundation 0x00007fff90669e73 ___forwarding___ + 371

4 CoreFoundation 0x00007fff90669c88 _CF_forwarding_prep_0 + 232

5 RemoteViewServices 0x00007fff84bf713c __54-[NSRemoteSavePanel _runOrderingOperationWithContext:]_block_invoke_0316 + 201

6 Foundation 0x00007fff86ea0fca -[__NSObserver _doit:] + 296

7 Foundation 0x00007fff86ea0e9d __-[NSNotificationCenter addObserverForName:object:queue:usingBlock:]_block_invoke_1 + 50

8 CoreFoundation 0x00007fff90625aaa _CFXNotificationPost + 2634

9 Foundation 0x00007fff86e5cfe7 -[NSNotificationCenter postNotificationName:object:userInfo:] + 65

10 AppKit 0x00007fff864085ac __-[NSWindow _windowTransformAnimationDidEnd:]_block_invoke_1 + 62

11 libdispatch.dylib 0x00007fff874008ba _dispatch_call_block_and_release + 18

12 libdispatch.dylib 0x00007fff8740272a _dispatch_main_queue_callback_4CF + 308

13 CoreFoundation 0x00007fff9061206c __CFRunLoopRun + 1724

14 CoreFoundation 0x00007fff90611676 CFRunLoopRunSpecific + 230

15 HIToolbox 0x00007fff8cd1031f RunCurrentEventLoopInMode + 277

16 HIToolbox 0x00007fff8cd1751b ReceiveNextEventCommon + 181

17 HIToolbox 0x00007fff8cd17456 BlockUntilNextEventMatchingListInMode + 62

18 AppKit 0x00007fff85d6af5d _DPSNextEvent + 659

19 AppKit 0x00007fff85d6a861 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 135

20 AppKit 0x00007fff85d6719d -[NSApplication run] + 470

21 AppKit 0x00007fff85fe5b88 NSApplicationMain + 867

22 TextEdit 0x000000010a8b3678 TextEdit + 5752

)

4/13/12 1:39:40.284 PM [0x0-0x4e04e].com.apple.TextEdit: terminate called throwing an exception

4/13/12 1:39:41.609 PM com.apple.launchd.peruser.501: ([0x0-0x4e04e].com.apple.TextEdit[603]) Job appears to have crashed: Abort trap: 6

4/13/12 1:39:41.783 PM ReportCrash: Saved crash report for TextEdit[603] version 1.7 (289.3) to /Users/David/Library/Logs/DiagnosticReports/TextEdit_2012-04-13-133941_Davids-M acBook-Air.crash

4/13/12 1:39:45.416 PM Firewall: Deny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17

4/13/12 1:39:48.264 PM xpchelper: restored permissions (100644 -> 100744) on /Users/David/Library/Containers/com.apple.TextEdit/Container.plist


3 new folders and the logs from me opening them

Apr 13, 2012 1:30 PM in response to Csound1

bplist00‘ 2*_ cacheLocationListYlanguages_ /System/Library/Automator_ cacheVersionNumber° ° Ren”

,2)_ actionBundleIDListsByActionTypeWactions_ *automatorDirectoryModificationDateInterval“

_ com.apple.automator-action_ %com.apple.automator-conversion-actionØ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmno pqrstuvwxyz{|}~ÄÅÇÉÑÖÜáàâäãåçéèêëíìîïñóòôöõúùûü†°¢£§•¶ß®©™´¨≠ÆØ∞±≤≥¥µ∂∑∏π∫ªºΩæø ¿¡¬√ƒ≈∆«»… ÀÃÕŒœ–—“”‘’÷◊ÿŸ⁄€‹›fifl‡·‚„‰ÂÊÁËÈÍÎÏÌÓÔÒÚÛÙıˆ˜¯˘˙˚¸˝˛ˇ

_ !com.apple.Automator.ActivateFonts_ /com.apple.Automator.AddAttachmenttoFrontMessage_ #com.apple.Automator.AddColorProfile_ com.apple.action.gridpdf_ &com.apple.Automator.AddMovieToIDVDMenu_ 'com.apple.Automator.Add_Photos_to_Album_ #com.apple.Automator.AddTrackstoiPod_ 'com.apple.Automator.AddTrackstoPlaylist_ 5com.apple.Automator.Add_Thumbnail_Icon_to_Image_Files_ $com.apple.Automator.AddToFontLibrary_ 'com.apple.Automator.AppleVersioningTool_ "com.apple.action.colorsyncprofiles_ 5com.apple.QuartzComposer.automatorActions.imageFilter_ com.apple.action.qfilterpdf_ "com.apple.Automator.ApplySQLAction_ (com.apple.Automator.Ask for Confirmation_ %com.apple.Automator.AskForFinderItems_ com.apple.Automator.AskForMovies_ com.apple.Automator.AskForPhotos_ !com.apple.Automator.AskForServers_ com.apple.Automator.AskForSongs_ #com.apple.Automator.TextInputDialog_ com.apple.Automator.MovieBrowser_ %com.apple.Automator.BuildXCodeProject_ com.apple.Automator.BurnADisc_ *com.apple.Automator.ChangeCaseofTrackNames_ #com.apple.Automator.ChangeImageType_ "com.apple.Automator.ChooseFromList_ #com.apple.Automator.CombineMessages_ com.apple.action.joinpdf_ com.apple.Automator.ReadTextFile_ com.apple.action.compresspdf_ $com.apple.Automator.ConnectToServers_ )com.apple.Automator.ConvertCSVToSQLAction_ 7com.apple.QuartzComposer.automatorActions.movieExporter_ com.apple.Automator.CopyFiles_ #com.apple.Automator.CopyToClipboard_ 9com.Apple.QuickTime.Automator.Create_Annotated_Movie_File_ $com.apple.Automator.CreateZipArchive_ 1com.apple.Automator.Create_Banner_Image_from_Text_ !com.apple.Automator.CreatePackage_ 'com.apple.Automator.ThumbnailsForImages_ com.apple.Automator.CropImages_ com.apple.Automator.cvsadd_ com.apple.Automator.cvscheckout_ com.apple.Automator.cvscommit_ com.apple.Automator.cvsupdate_ #com.apple.Automator.DeactivateFonts_ "com.apple.Automator.DeleteAllNotes_ 'com.apple.Automator.DeleteiCalCalendars_ $com.apple.Automator.DeleteiCalEvents_ #com.apple.Automator.DeleteiCalItems_ #com.apple.Automator.DeleteiCalToDos_ #com.apple.Automator.DisplayMessages_ $com.apple.Automator.Display_Webpages_ "com.apple.Automator.DisplayWebsite_ $com.apple.Automator.DownloadPictures_ (com.apple.Automator.DownloadInternetFile_ *com.apple.Automator.Duplicate_Finder_Items_ com.apple.Automator.EjectDisk_ com.apple.Automator.EjectiPod_ com.apple.EnableorDisableTracks_ )com.apple.QuickTime.Automator.EncodeMedia_ 2com.apple.QuickTime.Automator.Encode_to_MPEG_Audio_ #com.apple.action.encryptpdfdocument_ com.apple.Automator.EventSummary_ $com.apple.Automator.ExecuteSQLAction_ #com.apple.Automator.ExportFontFiles_ !com.apple.Automator.Export_Movies_ !com.apple.Automator.Export_vCards_ *com.apple.Automator.Extract_Data_from_Text_ com.apple.action.oddevenpdf_ )com.apple.Automator.ExtractPDFAnnotations_ "com.apple.Automator.ExtractPDFText_ /com.apple.Automator.Filter_Address_Book_Items_2_ #com.apple.Automator.Filter_Articles_ )com.apple.Automator.Filter_Finder_Items_2_ %com.apple.Automator.FilterFinderItems_ )com.apple.Automator.FilterFontsByFontType_ 'com.apple.Automator.Filter_iCal_Items_2_ )com.apple.Automator.Filter_iPhoto_Items_2_ com.apple.Automator.FilterItems_ )com.apple.Automator.Filter_iTunes_Items_2_ 'com.apple.Automator.Filter_Mail_Items_2_ $com.apple.Automator.FilterParagraphs_ !com.apple.Automator.Filter_URLs_2_ com.apple.Automator.FilterURLs_ -com.apple.Automator.Find_Address_Book_Items_2_ 'com.apple.Automator.Find_Finder_Items_2_ #com.apple.Automator.FindFinderItems_ %com.apple.Automator.Find_iCal_Items_2_ 'com.apple.Automator.Find_iPhoto_Items_2_ com.apple.Automator.FindItems_ 'com.apple.Automator.Find_iTunes_Items_2_ %com.apple.Automator.Find_Mail_Items_2_ #com.apple.Automator.BirthdayIsToday_ com.apple.Automator.FlipImage_ 6com.apple.Automator.Get_Attachments_from_Mail_Messages_ "com.apple.Automator.GetContactInfo_ -com.apple.Automator.Get_Contents_of_Clipboard_ 0com.apple.Automator.GetContentofTextEditDocument_ (com.apple.Automator.getContentOfWebpages_ #com.apple.GetURLofFrontSafariWindow_ %com.apple.Automator.GetWordDefinition_ 4com.apple.Automator.Get_Enclosure_URLs_from_Articles_ 'com.apple.Automator.Get_Feeds_from_Mail_ )com.apple.Automator.Get_Feeds_from_Safari_ 'com.apple.Automator.Get_Feeds_from_URLs_ $com.apple.Automator.GetFilesForFonts_ %com.apple.Automator.GetFolderContents_ com.apple.Automator.GetFontInfo_ )com.apple.Automator.GetFontsFromFontFiles_ 0com.apple.Automator.GetFontsFromTextEditDocument_ &com.apple.Automator.GetSlideshowImages_ 0com.apple.Automator.Get_Image_URLs_from_Articles_ $com.apple.Automator.FindLinkedImages_ /com.apple.Automator.Get_Link_URLs_from_Articles_ +com.apple.Automator.GetLinkURLsFromWebpages_ com.apple.Automator.GetNewEmail_ "com.apple.Automator.GetPDFMetadata_ .com.apple.Automator.Get_Permalinks_of_Articles_ +com.apple.Automator.GetPostScriptNameOfFont_ 5com.apple.Automator.Get_Selected_Address_Book_Items_2_ /com.apple.Automator.Get_Selected_Finder_Items_2_ /com.apple.Automator.Get_Selected_iPhoto_Items_2_ $com.apple.Automator.GetSelectedItems_ /com.apple.Automator.Get_Selected_iTunes_Items_2_ -com.apple.Automator.Get_Selected_Mail_Items_2_ 0com.apple.Automator.GetSpecifiedAddressBookItems_ "com.apple.Automator.SpecifiedFiles_ com.apple.GetSpecifiediCalItems_ +com.apple.Automator.GetSpecifiediPhotoItems_ +com.apple.Automator.GetSpecifiediTunesItems_ com.apple.GetSpecifiedMailItems_ com.apple.GetSpecifiedMovies_ com.apple.GetSpecifiedServers_ com.apple.GetSpecifiedText_ com.apple.Automator.URLList_ *com.apple.Automator.Get_Text_from_Articles_ "com.apple.Automator.GetWebpageText_ &com.apple.Automator.GettheCurrentTrack_ )com.apple.Automator.Get_Value_of_Variable_ com.apple.Automator.MassMailer_ %com.apple.Automator.Hide_Applications_ com.apple.Automator.HintMovies_ com.apple.Automator.RipAudioFile_ com.apple.Automator.iPhotoImport_ &com.apple.Automator.AddFilestoPlaylist_ +com.apple.Automator.InitiateRemoteBroadcast_ %com.apple.Automator.AssignFinderLabel_ #com.apple.Automator.OpenApplication_ com.apple.Automator.Loop_ !com.apple.Automator.Mark_Articles_ "com.apple.Automator.MountDiskImage_ com.apple.Automator.MoveToTrash_ com.apple.Automator.MoveFiles_ com.apple.Automator.New_Aliases_ com.apple.NewAudioCapture_ %com.apple.Automator.CreateNewCalendar_ com.apple.Automator.NewDiskImage_ !com.apple.Automator.MakeNewFolder_ #com.apple.Automator.New_iCal_Events_ com.apple.Automator.NewiDVDMenu_ 'com.apple.Automator.CreateMovieSequence_ 'com.apple.Automator.CreateiDVDSlideshow_ "com.apple.Automator.NewiPhotoAlbum_ !com.apple.Automator.CreateNewNote_ *com.apple.Automator.Create_iTunes_Playlist_ "com.apple.Automator.CreateNewEmail_ )com.apple.Automator.CreatePDFContactSheet_ $com.apple.Automator.NewPDFfromImages_ )com.apple.Automator.NewQuickTimeSlideshow_ com.apple.NewScreenCapture_ com.apple.Automator.NewTextFile_ -com.apple.Automator.CreateNewTextEditDocument_ "com.apple.Automator.New_To_Do_Item_ com.apple.NewVideoCapture_ #com.apple.Automator.OpenFinderItems_ 'com.apple.Automator.OpenImagesInPreview_ ,com.apple.Automator.OpenKeynotePresentations_ com.apple.Automator.PadImage_ com.apple.PauseCapture_ $com.apple.Automator.PauseDVDPlayback_ &com.apple.Automator.PauseiTunesPlaying_ com.apple.Automator.Pause_ com.apple.Automator.PDFtoImages_ com.apple.Automator.PlayDVD_ 'com.apple.Automator.PlayiPhotoSlideshow_ &com.apple.Automator.PlayiTunesPlaylist_ com.apple.automator.PlayMovies_ $com.apple.Automator.PrintFinderItems_ com.apple.Automator.PrintImage_ ,com.apple.Automator.PrintKeynotePresentation_ )com.apple.Automator.Quit_All_Applications_ $com.apple.Automator.Quit_Application_ (com.apple.Automator.RemoveEmptyPlaylists_ #com.apple.Automator.RemoveFontFiles_ +com.apple.Automator.AddNumbersToFinderNames_ com.apple.action.renamepdf_ com.apple.action.imagepdf_ =com.apple.QuartzComposer.automatorActions.compositionRenderer_ com.apple.ResumeCapture_ %com.apple.Automator.ResumeDVDPlayback_ 'com.apple.Automator.Reveal_Finder_Items_ com.apple.Automator.ReviewPhotos_ com.apple.Automator.RotateImage_ com.apple.Automator.RunScript_ com.apple.Automator.RunSelfTest_ com.apple.RunShellScript_ com.apple.RunWebService_ #com.apple.Automator.ExecuteWorkflow_ ,com.apple.Automator.saveImagesFromWebContent_ com.apple.Automator.ScaleImage_ com.apple.Automator.SearchPDFs_ )com.apple.Automator.SelectFontsInFontBook_ (com.apple.Automator.SendBirthdayGreeting_ (com.apple.Automator.SendOutgoingMessages_ -com.apple.Automator.Set_Application_for_Files_ %com.apple.Automator.SetComputerVolume_ 0com.apple.Automator.SetContentOfTextEditDocument_ %com.apple.Automator.SetDesktopPicture_ com.apple.Automator.FolderViews_ *com.apple.Automator.SetiDVDBackgroundImage_ %com.apple.Automator.SetiDVDButtonFace_ &com.apple.Automator.SetiTunesTrackInfo_ !com.apple.Automator.SetEQofTracks_ #com.apple.Automator.SetiTunesVolume_ 'com.apple.Automator.SetMovieAnnotations_ .com.apple.Automator.SetMoviePlaybackProperties_ com.apple.Automator.SetMovieURL_ /com.apple.Automator.Set_Options_of_iTunes_Songs_ "com.apple.Automator.SetPDFMetadata_ com.apple.AddFinderComments_ )com.apple.Automator.Set_Value_of_Variable_ $com.apple.Automator.ShowMainiDVDMenu_ 0com.apple.keynote.automator.ShowNextKeynoteSlide_ ,com.apple.Automator.ShowPreviousKeynoteSlide_ -com.apple.Automator.ShowSpecifiedKeynoteSlide_ !com.apple.Automator.SortDiskItems_ com.apple.Automator.SpeakText_ #com.apple.Automator.SpotlightAction_ com.apple.StartCapture_ &com.apple.Automator.StartiTunesPlaying_ &com.apple.Automator.StartiTunesVisuals_ )com.apple.Automator.StartKeynoteSlideshow_ $com.apple.Automator.StartScreenSaver_ com.apple.StopCapture_ #com.apple.Automator.StopDVDPlayback_ %com.apple.Automator.StopiTunesVisuals_ (com.apple.Automator.StopKeynoteSlideshow_ !com.apple.Automator.SystemProfile_ com.apple.Automator.TakePicture_ "com.apple.Automator.TakeScreenShot_ %com.apple.Automator.TakeVideoSnapshot_ #com.apple.Automator.TextToAudioFile_ %com.apple.Automator.Text_to_EPUB_File_ com.apple.Automator.UpdateiPod_ %com.apple.Automator.ValidateFontFiles_ com.apple.Automator.LogOutput_ "com.apple.Automator.FloatingDialog_ com.apple.Automator.WatchMeDo_ com.apple.action.watermarkpdf_ !com.apple.Automator.Website_PopupØ ! " # $ % & ' ( ) * +_ -com.apple.ConvertAccountObjectToMailboxObject_ 3com.apple.Automator.ConvertAlbumObjectToPhotoObject_ 4com.apple.Automator.ConvertAliasObjectToFinderObject_ 9com.apple.Automator.ConvertAliasObjectToiPhotoPhotoObject_ ,com.apple.ConvertCalendarObjectToEventObject_ +com.apple.ConvertCalendarObjectToToDoObject_ 6com.apple.Automator.Convert_Cocoa_Data_To_Cocoa_String_ 6com.apple.Automator.Convert_Cocoa_String_To_Cocoa_Data_ <com.apple.Automator.Convert_Cocoa_URL_to_iTunes_Track_Object_ 1com.apple.Automator.Convert_Cocoa_URL_to_RSS_Feed_ -com.apple.Automator.Convert_Feeds_to_Articles_ 4com.apple.Automator.ConvertFinderObjectToAliasObject_ *com.apple.ConvertGroupObjectToPersonObject_ )com.apple.ConvertiPhotoAlbumToAliasObject_ 9com.apple.Automator.ConvertiTunesTrackObjectToAliasObject_ <com.apple.Automator.ConvertiTunesPlaylistObjectToAliasObject_ -com.apple.ConvertMailboxObjectToMessageObject_ 9com.apple.Automator.ConvertiPhotoPhotoObjectToAliasObject_ +com.apple.ConvertPlaylistObjectToSongObject_ -com.apple.ConvertSourceObjectToPlaylistObjectfl U *»ÓGØ }j Q "W≈ :‹4À·„á(m†i{‘Ê ¡èœ ∑38û Œ™*Mt®Ä˛ )ß’ '∆–)!-6 +y

bA È & ¢aÛ—Â쇸&ñ∏. Nu_πÇhãw" ≠Zä˚üıÙ cÎF~Ò∞I› !Úz Üô§‚,±dïÆÖëúˆàŸ' ≤´©çÑfléÏ¥pnÕ¯/B\+<…√Ô=÷̓ˇq $ 9â læ • ◊VJÉìD ≥% Ofi ”$ î S17^ªòÁËêoÌ x;¶ 2

“T˜rf€#K°Yó XC L«|‰º¨@H£ Ωe0⁄ [ù ∂>sÅE?ÿ %µ` #íõRöå˝ ∫g ˙5 ( P ø v ]k˘¿ - q ö ∑ € 8 e ï ∆ Ë K j ñ À ˙ ( T á « È @ g å « ˆ > f é ∑ Ô 9 c â ≠ à R x ï ∑ ÊClíª






does this look ok I want to show you my user name settings too. If it looks normal I wont bother you anymore until I have proof online. so those lock files are ok then?

Apr 13, 2012 1:47 PM in response to thomas_r.

When I boot up the computer holding down command R it takes me do disk recovery utility right. then I click on disk utility it will not let me verify or fix disk permmisons or the disk. It also wont let me secure delete. I heard that might just be a solid state drive thing. when I do erase the Mac HD both the whole disk and the mounted partition named Mac HD it will say the disk has 121.77gb of space which is normal for a 128gb drive once formatted. then the Mac HD will say it has 120.43gb of space which is almost right because the recovery partition is about 1.4gb but once the Mac HD has been completely erased even though the disk size is 120.43 it say available 120.15gb and that 221mb of data is still on the disk and that there is 3 files and 2 folders on the Mac HD and when I tried restoring it from thumb drive it created same size hidden file on thumb drive and it can no longer be erased or reformatted.

Apr 13, 2012 2:10 PM in response to Csound1

Thats what I have been doing today was the 3rd time this week. completely erasing the HD even the recovery partition the last 2 times and then reinstalling Lion once with the usb thumb drive and 2 online. and I still have all the same stuff going on. Also my user settings get changed so that my login shell is /usr/bin/false

Is this the flashback malware?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.